1# kickstart processes and scripts (system process) 2type kickstart, domain; 3type kickstart_exec, file_type, exec_type; 4 5init_daemon_domain(kickstart) 6 7# Run kickstart_checker.sh 8allow kickstart shell_exec:file rx_file_perms; 9allow kickstart kickstart_exec:file rx_file_perms; 10 11# kickstart_checker.sh changes block devices 12# /dev/block/platform/msm_sdcc.1/by-name/m9kefs* 13allow kickstart self:capability { chown fowner }; 14 15# Let qcks access /dev/mdm node (modem driver) 16allow kickstart radio_device:chr_file r_file_perms; 17 18# Access USB host ks bridge drivers 19allow kickstart kickstart_device:chr_file rw_file_perms; 20 21# Read and write to /dev/block/mmcblk0p[567] 22allow kickstart efs_block_device:blk_file { setattr rw_file_perms }; 23allow kickstart block_device:dir { getattr write search }; 24 25# Write contents of block device to kickstart data dir 26allow kickstart kickstart_data_file:file create_file_perms; 27allow kickstart kickstart_data_file:dir rw_dir_perms; 28 29# Read radio firmware file(s) 30allow kickstart radio_efs_file:dir search; 31allow kickstart radio_efs_file:file r_file_perms; 32 33# Run dd from toolbox on firmware files 34allow kickstart shell_exec:file rx_file_perms; 35allow kickstart system_file:file execute_no_trans; 36 37# Wake lock access 38wakelock_use(kickstart) 39 40# Set property key gsm.radio.kickstart 41allow kickstart radio_prop:property_service set; 42unix_socket_connect(kickstart, property, init) 43 44# Access /sys/module/rmnet_usb/parameters/rmnet_data_init 45allow kickstart sysfs_rmnet:file w_file_perms; 46